You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Steve Loughran (JIRA)" <ji...@apache.org> on 2019/08/07 14:55:00 UTC
[jira] [Commented] (HADOOP-16498) AzureADAuthenticator cant
authenticate in china
[ https://issues.apache.org/jira/browse/HADOOP-16498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16902130#comment-16902130 ]
Steve Loughran commented on HADOOP-16498:
-----------------------------------------
{code}
org.apache.hadoop.fs.azurebfs.contracts.exceptions.AbfsRestOperationException AADToken: HTTP connection failed for getting token from AzureAD. Http response: 400 Bad Request
First 1K of Body: {"error":"invalid_request","error_description":"AADSTS90002: Tenant '86D99C15-157E-4D84-BFB7-8C4C97BC7F7D' not found. This may happen if there are no active subscriptions for the tenant. Check with your subscription administrator.\r\nTrace ID: XXX\r\nCorrelation ID: YYYr\nTimestamp: 2019-07-30 07:36:40Z","error_codes":[90002],"timestamp":"2019-07-30 07:36:40Z","....
{code}
reason: hard code paths of https://login.microsoftonline.com
But the China AAD Auth URLs are
https://login.chinacloudapi.cn
https://login.partner.microsoftonline.cn
> AzureADAuthenticator cant authenticate in china
> -----------------------------------------------
>
> Key: HADOOP-16498
> URL: https://issues.apache.org/jira/browse/HADOOP-16498
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/azure
> Affects Versions: 3.2.0
> Reporter: Steve Loughran
> Priority: Major
>
> you cant auth with Azure China as it always tries to login at the global endpoint
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org